Priority Feed
Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.
Ranked by EVRS
910 match · filtered from 2,960| # | CVE · title | EVRS | CVSS | EPSS | In KEV since | CISA deadline | Details |
|---|---|---|---|---|---|---|---|
| 1 | CVE-2014-0160OpenSSL — OpenSSL Information Disclosure VulnerabilityKEV since 2022 · listed over a year | 84 | 7.5 | 100.0% · 99.99th | 2022-05-04 | 2022-05-25KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 2 | CVE-2023-32315Ignite Realtime — Ignite Realtime Openfire Path Traversal VulnerabilityKEV since 2023 · listed over a year | 84 | 7.5 | 100.0% · 99.99th | 2023-08-24 | 2023-09-14KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 3 | CVE-2023-44487IETF — HTTP/2 Rapid Reset Attack VulnerabilityKEV since 2023 · listed over a year | 84 | 7.5 | 100.0% · 99.99th | 2023-10-10 | 2023-10-31KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 4 | CVE-2020-3452Cisco — Cisco ASA and FTD Read-Only Path Traversal VulnerabilityKEV since 2021 · listed over a year | 84 | 7.5 | 100.0% · 99.99th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 5 | CVE-2021-22204Perl — ExifTool Remote Code Execution VulnerabilityKEV since 2021 · listed over a year | 84 | 7.8 | 100.0% · 99.98th | 2021-11-17 | 2021-12-01KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 6 | CVE-2021-3156Sudo — Sudo Heap-Based Buffer Overflow VulnerabilityKEV since 2022 · listed over a year | 84 | 7.8 | 100.0% · 99.98th | 2022-04-06 | 2022-04-27KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 7 | CVE-2021-39226Grafana Labs — Grafana Authentication Bypass VulnerabilityKEV since 2022 · listed over a year | 84 | 7.3 | 99.9% · 99.97th | 2022-08-25 | 2022-09-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 8 | CVE-2018-0296Cisco — Cisco Adaptive Security Appliance (ASA) Denial-of-Service VulnerabilityKEV since 2021 · listed over a year | 84 | 7.5 | 99.9% · 99.97th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 9 | CVE-2023-21839Oracle — Oracle WebLogic Server Unspecified VulnerabilityKEV since 2023 · listed over a year | 84 | 7.5 | 99.9% · 99.97th | 2023-05-01 | 2023-05-22KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 10 | CVE-2019-1653Cisco — Cisco Small Business RV320 and RV325 Routers Information Disclosure VulnerabilityKEV since 2021 · listed over a year | 84 | 7.5 | 99.9% · 99.96th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 11 | CVE-2023-29298Adobe — Adobe ColdFusion Improper Access Control VulnerabilityKEV since 2023 · listed over a year | 84 | 7.5 | 99.8% · 99.96th | 2023-07-20 | 2023-08-10KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.998. | |||||||
| 12 | CVE-2023-38205Adobe — Adobe ColdFusion Improper Access Control VulnerabilityKEV since 2023 · listed over a year | 84 | 7.5 | 99.8% · 99.95th | 2023-07-20 | 2023-08-10KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.998. | |||||||
| 13 | CVE-2024-28995SolarWinds — SolarWinds Serv-U Path Traversal VulnerabilityKEV since 2024 · listed over a year | 84 | 7.5 | 99.6% · 99.95th | 2024-07-17 | 2024-08-07KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.996. | |||||||
| 14 | CVE-2019-17558Apache — Apache Solr VelocityResponseWriter Plug-In Remote Code Execution VulnerabilityKEV since 2021 · listed over a year | 84 | 7.5 | 98.6% · 99.92nd | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.986. | |||||||
| 15 | CVE-2024-20767Adobe — Adobe ColdFusion Improper Access Control VulnerabilityKEV since 2024 · listed over a year | 84 | 7.4 | 98.5% · 99.92nd | 2024-12-16 | 2025-01-06KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.985. | |||||||
| 16 | CVE-2021-21311Adminer — Adminer Server-Side Request Forgery VulnerabilityKEV since 2025 · listed over a year | 84 | 7.2 | 98.5% · 99.92nd | 2025-09-29 | 2025-10-20KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.985. | |||||||
| 17 | CVE-2024-12987DrayTek — DrayTek Vigor Routers OS Command Injection VulnerabilityKEV since 2025 · listed over a year | 84 | 6.9 | 98.2% · 99.91st | 2025-05-15 | 2025-06-05KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.982. | |||||||
| 18 | CVE-2022-43769Hitachi Vantara — Hitachi Vantara Pentaho BA Server Special Element Injection VulnerabilityKEV since 2025 · listed over a year | 84 | 7.2 | 97.7% · 99.91st | 2025-03-03 | 2025-03-24KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.977. | |||||||
| 19 | CVE-2020-25078D-Link — D-Link DCS-2530L and DCS-2670L Devices Unspecified VulnerabilityKEV since 2025 · listed over a year | 84 | 7.5 | 97.5% · 99.9th | 2025-08-05 | 2025-08-26KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.975. | |||||||
| 20 | CVE-2021-41277Metabase — Metabase GeoJSON API Local File Inclusion VulnerabilityKEV since 2024 · listed over a year | 84 | 7.5 | 97.2% · 99.9th | 2024-11-12 | 2024-12-03KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.972. | |||||||
| 21 | CVE-2017-17562Embedthis — Embedthis GoAhead Remote Code Execution VulnerabilityKEV since 2021 · listed over a year | 84 | 8.1 | 97.1% · 99.89th | 2021-12-10 | 2022-06-10KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.971. | |||||||
| 22 | CVE-2017-8291Artifex — Artifex Ghostscript Type Confusion VulnerabilityKEV since 2022 · listed over a year | 84 | 7.8 | 97.0% · 99.89th | 2022-05-24 | 2022-06-14KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.970. | |||||||
| 23 | CVE-2019-20500D-Link — D-Link DWL-2600AP Access Point Command Injection VulnerabilityKEV since 2023 · listed over a year | 84 | 7.8 | 96.7% · 99.89th | 2023-06-29 | 2023-07-20KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.967. | |||||||
| 24 | CVE-2017-12637SAP — SAP NetWeaver Directory Traversal VulnerabilityKEV since 2025 · listed over a year | 84 | 7.5 | 95.1% · 99.87th | 2025-03-19 | 2025-04-09KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.951. | |||||||
| 25 | CVE-2022-33891Apache — Apache Spark Command Injection VulnerabilityKEV since 2023 · listed over a year | 84 | 8.8 | 93.2% · 99.84th | 2023-03-07 | 2023-03-28KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.932. | |||||||
https://evulnable.com/vulnerability-management/feeds/kev-deadlines.icsOpenSSL — OpenSSL Information Disclosure Vulnerability
EVRS 84 Urgent
Rank 1 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 7.5 NVD
- EPSS
- 100.0% 99.99th percentile
- In CISA KEV since
- 2022-05-04
- CISA deadline
- 2022-05-25 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- OpenSSL
- Source
- CISA KEV
Ignite Realtime — Ignite Realtime Openfire Path Traversal Vulnerability
EVRS 84 Urgent
Rank 2 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 7.5 NVD
- EPSS
- 100.0% 99.99th percentile
- In CISA KEV since
- 2023-08-24
- CISA deadline
- 2023-09-14 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Ignite Realtime
- Source
- CISA KEV
IETF — HTTP/2 Rapid Reset Attack Vulnerability
EVRS 84 Urgent
Rank 3 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 7.5 NVD
- EPSS
- 100.0% 99.99th percentile
- In CISA KEV since
- 2023-10-10
- CISA deadline
- 2023-10-31 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- IETF
- Source
- CISA KEV
Cisco — Cisco ASA and FTD Read-Only Path Traversal Vulnerability
EVRS 84 Urgent
Rank 4 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 7.5 NVD
- EPSS
- 100.0% 99.99th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Perl — ExifTool Remote Code Execution Vulnerability
EVRS 84 Urgent
Rank 5 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 7.8 NVD
- EPSS
- 100.0% 99.98th percentile
- In CISA KEV since
- 2021-11-17
- CISA deadline
- 2021-12-01 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Perl
- Source
- CISA KEV
Sudo — Sudo Heap-Based Buffer Overflow Vulnerability
EVRS 84 Urgent
Rank 6 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 7.8 NVD
- EPSS
- 100.0% 99.98th percentile
- In CISA KEV since
- 2022-04-06
- CISA deadline
- 2022-04-27 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Sudo
- Source
- CISA KEV
Grafana Labs — Grafana Authentication Bypass Vulnerability
EVRS 84 Urgent
Rank 7 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 7.3 NVD
- EPSS
- 99.9% 99.97th percentile
- In CISA KEV since
- 2022-08-25
- CISA deadline
- 2022-09-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Grafana Labs
- Source
- CISA KEV
Cisco — Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability
EVRS 84 Urgent
Rank 8 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 7.5 NVD
- EPSS
- 99.9% 99.97th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Oracle — Oracle WebLogic Server Unspecified Vulnerability
EVRS 84 Urgent
Rank 9 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 7.5 NVD
- EPSS
- 99.9% 99.97th percentile
- In CISA KEV since
- 2023-05-01
- CISA deadline
- 2023-05-22 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Oracle
- Source
- CISA KEV
Cisco — Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability
EVRS 84 Urgent
Rank 10 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 7.5 NVD
- EPSS
- 99.9% 99.96th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Adobe — Adobe ColdFusion Improper Access Control Vulnerability
EVRS 84 Urgent
Rank 11 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 7.5 NVD
- EPSS
- 99.8% 99.96th percentile
- In CISA KEV since
- 2023-07-20
- CISA deadline
- 2023-08-10 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
Adobe — Adobe ColdFusion Improper Access Control Vulnerability
EVRS 84 Urgent
Rank 12 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 7.5 NVD
- EPSS
- 99.8% 99.95th percentile
- In CISA KEV since
- 2023-07-20
- CISA deadline
- 2023-08-10 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
SolarWinds — SolarWinds Serv-U Path Traversal Vulnerability
EVRS 84 Urgent
Rank 13 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 7.5 NVD
- EPSS
- 99.6% 99.95th percentile
- In CISA KEV since
- 2024-07-17
- CISA deadline
- 2024-08-07 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- SolarWinds
- Source
- CISA KEV
Apache — Apache Solr VelocityResponseWriter Plug-In Remote Code Execution Vulnerability
EVRS 84 Urgent
Rank 14 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 7.5 NVD
- EPSS
- 98.6% 99.92nd percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apache
- Source
- CISA KEV
Adobe — Adobe ColdFusion Improper Access Control Vulnerability
EVRS 84 Urgent
Rank 15 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 7.4 NVD
- EPSS
- 98.5% 99.92nd percentile
- In CISA KEV since
- 2024-12-16
- CISA deadline
- 2025-01-06 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
Adminer — Adminer Server-Side Request Forgery Vulnerability
EVRS 84 Urgent
Rank 16 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 7.2 NVD
- EPSS
- 98.5% 99.92nd percentile
- In CISA KEV since
- 2025-09-29
- CISA deadline
- 2025-10-20 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adminer
- Source
- CISA KEV
DrayTek — DrayTek Vigor Routers OS Command Injection Vulnerability
EVRS 84 Urgent
Rank 17 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 6.9 NVD
- EPSS
- 98.2% 99.91st percentile
- In CISA KEV since
- 2025-05-15
- CISA deadline
- 2025-06-05 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- DrayTek
- Source
- CISA KEV
Hitachi Vantara — Hitachi Vantara Pentaho BA Server Special Element Injection Vulnerability
EVRS 84 Urgent
Rank 18 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 7.2 NVD
- EPSS
- 97.7% 99.91st percentile
- In CISA KEV since
- 2025-03-03
- CISA deadline
- 2025-03-24 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Hitachi Vantara
- Source
- CISA KEV
D-Link — D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability
EVRS 84 Urgent
Rank 19 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 7.5 NVD
- EPSS
- 97.5% 99.9th percentile
- In CISA KEV since
- 2025-08-05
- CISA deadline
- 2025-08-26 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- D-Link
- Source
- CISA KEV
Metabase — Metabase GeoJSON API Local File Inclusion Vulnerability
EVRS 84 Urgent
Rank 20 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 7.5 NVD
- EPSS
- 97.2% 99.9th percentile
- In CISA KEV since
- 2024-11-12
- CISA deadline
- 2024-12-03 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Metabase
- Source
- CISA KEV
Embedthis — Embedthis GoAhead Remote Code Execution Vulnerability
EVRS 84 Urgent
Rank 21 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 8.1 NVD
- EPSS
- 97.1% 99.89th percentile
- In CISA KEV since
- 2021-12-10
- CISA deadline
- 2022-06-10 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Embedthis
- Source
- CISA KEV
Artifex — Artifex Ghostscript Type Confusion Vulnerability
EVRS 84 Urgent
Rank 22 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 7.8 NVD
- EPSS
- 97.0% 99.89th percentile
- In CISA KEV since
- 2022-05-24
- CISA deadline
- 2022-06-14 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Artifex
- Source
- CISA KEV
D-Link — D-Link DWL-2600AP Access Point Command Injection Vulnerability
EVRS 84 Urgent
Rank 23 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 7.8 NVD
- EPSS
- 96.7% 99.89th percentile
- In CISA KEV since
- 2023-06-29
- CISA deadline
- 2023-07-20 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- D-Link
- Source
- CISA KEV
SAP — SAP NetWeaver Directory Traversal Vulnerability
EVRS 84 Urgent
Rank 24 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 7.5 NVD
- EPSS
- 95.1% 99.87th percentile
- In CISA KEV since
- 2025-03-19
- CISA deadline
- 2025-04-09 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- SAP
- Source
- CISA KEV
Apache — Apache Spark Command Injection Vulnerability
EVRS 84 Urgent
Rank 25 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 8.8 NVD
- EPSS
- 93.2% 99.84th percentile
- In CISA KEV since
- 2023-03-07
- CISA deadline
- 2023-03-28 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apache
- Source
- CISA KEV
